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With the ever-changing threat landscape, organizations need to constantly review how Better protection from advanced threats 
hey are managing the threats that are targeting them. In the past, threats were one-to- * Improved visibility into attacks and 
many. Today we know the majority of attacks target only a few, or even a single victim. threats across all emails, endpoints, 
ar : eo ee hybrid d i ts, and network 
Another reality is that threats can start through a single entry point in your organization vee ee Sra O ee 
with 94 percent of attacks coming through email’), and then laterally move to another, * Automated identification of new threats 
f f o detected using artificial intelligence and 
often with a dwell time of weeks, if not months. Many organizations struggle due to the correlation rules 
complexity and volume of security solutions they deal with on a daily basis. In most cases , 
he different layers or solutions do not integrate together, so identifying threats that have Rapid response an deployment ot 
. . . new threat security techniques across 
grown across your IT infrastructure may not be detected or identified as part of a single multiple layers of defense 
attack. Your organization needs to address these challenges with a different approach. 





A MODERN APPROACH 


Leveraging XGen™ security capa 








Powered by XGen™ security, which applies 
the right technique at the right time 


bilities across multiple solutions, Trend Micro's 


Connected Threat Defense is a layered security approach that gives you a better way 
to quickly protect, detect, and respond to new threats, leveraging central visibility and 


investigation capabilities that soan your complete IT 


SEE ACROSS ALL SECURITY LAYERS FO 


infrastructure. 


R MAXIMUM VISIBILITY 





AND STREAMLINED INVESTIGATIONS 





Enable rapid response 
through shared threat 
intelligence and 
delivery of real-time 
security updates 


Gain centralized visibility 
accross the system, 

and analyze and assess 
impact of threats 





Assess potential 
vulnerabilities and 


-j A proactively protect 
J networks, endpoints and 
hybrid cloud environments 
| * PROTECT 
VISIBILITY & 


RESPOND 
A 


. 
INVESTIGATION . 

Detect advanced malware, 
behavior and communications 


invisible to standard defenses 





DETECT 


PROTECT YOUR ORGANIZATION 


Protection is focused on proactively protecting your networks, endpoints, email, and 


hybrid cloud environments. No s 


ingle technique can protect against all threats, which 


is why the XGen™ security approach of leveraging a cross-generational blend of threat 


defense techniques provides the 


solutions incorporate many protection techniques, includin 


approaches like anti-malware, in 


broadest range of threat protection. Trend Micro 
g highly effective traditional 
rusion prevention, whitelisting, encryption and data loss 


prevention. They also include new state-of-the-art techniques like high fidelity machine 


learning and behavior analysis to catch advanced threats li 


Despite the strength of multiple 


e ransomware. 


echniques, you will not be able to protect your 





organizations from 100 percent of malware or attacks. That is why being able to detect 


advanced malware, malicious be 
defenses is so critical. Detection 


command and control (C&C) communications, and advanced persistent threats. 


12019 Verizon Data Breach Report 
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havior, and communications that are invisible to standard 





is particularly important to detect zero-day attacks, 
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DETECT THREATS ACROSS THE ENTERPRISE 


With intelligent sensors across email, endpoint, server, cloud workloads, and networks 
gathering extensive activity data, you have the ability to quickly understand the big 
picture of what is happening. For example, network inspection gives you 360-degree 
monitoring of network traffic and scans more than 100 protocols to detect suspicious 
activity, command-and-control (C&C) communications, and lateral movement of inbound, 
outbound, and internal network communications, giving you insights about the threats 
coming your way and a chance to thwart them. 











Trend Micro” XDR brings it all together. This cross-layer detection and response solution 
applies the most effective Al and expert analytics to the activity data, producing fewer, 
higher-fidelity alerts. Global threat intelligence from the Trend Micro™ Smart Protection 
Network™, combined with expert detection rules continually updated from our threat 
experts, maximize the power of Al and analytical models. 


RESPOND TO THREATS FASTER 


When a threat is detected, either in real-time with protection techniques or an existing 
threat with detection techniques, you need to be able to respond quickly. As a part of a 
Connected Threat Defense, response capabilities delivered through XDR include: 





o Prioritized alerts based on one expert alert schema to interpret data in a standard 
and meaningful way 





o A consolidated view to uncover events and the attack path across security layers 


o Guided investigations to understand the impact and identify the path to resolution 


Response is alSo based on taking rapid action on detection events. If a threat is discovered, 


a file is found to be malicious, or C&C traffic is detected, then your security needs to 
create and share real-time information about that file or C&C server and immediately 
Share it with all endpoint, server, and network components. This ensures that the next 
time the attack or threat is encountered, it will be blocked automatically—even as it 
attempts to laterally move through your organization. 
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Connected Threat Defense in Action 


Here's what could happen with a 
Connected Threat Defense approach: 


* The attack begins with the arrival of an 
email in a user's inbox, complete with 
an attachment containing a zero-day 
information-stealing threat. It could 
be stopped at the Protection stage 
by any of the numerous advanced 
security techniques. 


e However, this zero-day threat has 
been designed to bypass traditional 
techniques, which makes the 
Detection stage vital. The messaging 
layer submits the attachment to the 
sandbox which identifies the file as 
malicious, but also identifies C&C 
communication data. 








e After analysis of a sophisticated 


threat must come the Response via 
prioritized analysis of all environments 
for additional potential related 
threats. In addition, response should 
include real-time data sharing across 
all endpoint, server, and network 
security components. Failure to 

do this means the threat won't be 
blocked automatically the next time 
it's encountered - multiplying risk. 
Response also includes remediation 
steps like automatically cleaning 
computers of any malware and in doing 
so, maximizing user productivity. With 
Central Visibility, organizations can 
quickly see who else got that email or 
threat and respond before the threat 
spreads laterally through the network. 

















CENTRALIZED VISIBILITY AND INVESTIGATION 


It is important to have techniques that cover the entire threat life cycle. However, it is 
also a key requirement to have those techniques integrated and coordinated into a single 
solution where all components work together with central visibility and the ability to easily 


investigate security incidents. 


Unlike endpoint detection and response (EDR), Trend Micro XDR collects and correlates 


data across email, endpoint, servers, cloud workloads, and networks, enabling visibility 


and analysis that is difficult or impossible to achieve otherwise. With more context, events 
that seem benign on their own suddenly become meaningful indicators of compromise, 














and you can quickly contain the impact, minimizing the severity and scope. 








While most organizations are resource and skillset constrained, XDR offers a single 
platform to alleviate the time and dedicated expert resources required to sift through 
alerts. In addition, Trend Micro™ Managed XDR helps augment understaffed security 





teams with 24/7 detection, investigation, and response services. 
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POWERED BY XGEN™ SECURITY 


The one constant is the need to regularly assess the threat landscape and mode 


your 


security controls based on the latest tactics, techniques, and procedures (TTPs) utilized by 
your adversaries. Powered by XGen™ security, the need for a Connected Threat Defense 


has emerged because the traditional model is no longer adequate to defend aga 


inst 


today's attacks and threats. This approach allows an organization to take advantage 
of a range of cross-generational threat defense techniques that are coordinated and 





integrated across your networks, endpoints, and hybrid cloud environments, and 
you the visibility you need to quickly identify and remediate these attacks. 


For details about what personal information we collect and why, please see our Privacy Notice on our website at: 
https://www.trendmicro.com/privacy 
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gives 


Trend Micro Connected Threat Defense 
works across Trend Micro User 
Protection, Network Defense, and 
Hybrid Cloud Security. solutions, and 
is underpinned by Trend Micro XDR. 
Including our global threat intelligence 
network, all Trend Micro offerings are 


powered by XGen™ security. 
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Contact your Trend Micro representative 
or channel partner for more information, 
or visit www.trendmicro.com. 
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